Adoption

Agent Skills are supported by leading AI development tools.

VS Code Gemini CLI GitHub Goose Amp Cursor Claude Code Letta OpenCode Claude OpenAI Codex Factory VS Code Gemini CLI GitHub Goose Amp Cursor Claude Code Letta OpenCode Claude OpenAI Codex Factory

steipete/clickclack

Name: clickclack
Author: steipete

skills/clickclack/SKILL.md

npx skillsauth add steipete/agent-scripts clickclack

Clean

TrivyContainer and dependency vulnerability scanner

Clean

SemgrepStatic code analysis for vulnerabilities

Clean

mcp-scan (Snyk)Model Context Protocol security validation

Skipped

Snyk (dep)Open source security scanning

Skipped

Socket.devSupply chain security analysis

Skipped

VirusTotalMulti-engine malware detection

Skipped

CrowdStrikeAdvanced threat intelligence

Skipped

OSV-ScannerOpen Source Vulnerability database check

Skipped

OWASP Dep-Check

ClickClack

Use this for ClickClack product/runtime ops, deploys, hosted app checks, and domain questions.

What

Repo: ~/Projects/clickclack / https://github.com/openclaw/clickclack
Product: self-hostable Slack-style chat for OpenClaw/community/agent workflows.
Surfaces:
- https://clickclack.chat product site (Cloudflare Worker custom domain)
- https://www.clickclack.chat (Worker custom domain, same worker)
- https://app.clickclack.chat hosted app (Worker custom domain)
- https://docs.clickclack.chat GitHub Pages docs from docs/

Prod (Cloudflare, since 2026-07-05)

Everything is one Cloudflare Worker clickclack in the OpenClaw account (91b59577e757131d68d55a471fe32aca) fronting a Cloudflare Container.
Worker + container config: wrangler.jsonc (routes are declarative custom_domain entries).
Container: Go binary + embedded SPA from Dockerfile.cloudflare; data in Supabase Postgres (CLICKCLACK_DB secret) and R2 uploads (clickclack-uploads).
Zone clickclack.chat id e7f93ba1ec24d75ce60c468bbaba5cb5 (OpenClaw account). docs CNAME → openclaw.github.io stays DNS-only.
1Password (OpenClaw vault): "Cloudflare ClickClack deploy token" (api_token field, workers-scoped; no DNS edit), "Cloudflare ClickClack R2 uploads".
Legacy Hetzner box clickclack-prod-01 (157.90.237.80) no longer serves any DNS; decommission when confident. Old runbook in git history of this file.

Deploy

cd ~/Projects/clickclack && git pull --ff-only
Docker must run (OrbStack: open -a OrbStack).
pnpm deploy:cloudflare (auth: wrangler login OAuth or the 1Password deploy token as CLOUDFLARE_API_TOKEN).
Rollout gotcha: the running container instance is NOT replaced while it has traffic; sleepAfter=10m never fires on a public site. Bump CLICKCLACK_CONTAINER_NAME in wrangler.jsonc (dated, e.g. prod-YYYYMMDD-open-org) and redeploy to force a fresh instance on the new image. Container is stateless (Postgres/R2), so the swap is safe.
Commit the wrangler.jsonc bump.

Verify

curl -s https://clickclack.chat/ | grep -oE 'entry/app\.[A-Za-z0-9_-]+\.js' — hash must match the freshly deployed build (compare against https://clickclack.services-91b.workers.dev).
Same check for https://app.clickclack.chat and https://www.clickclack.chat.
pnpm exec wrangler containers info a03b3158-bcfd-4962-9a86-e75489f4e803 — health + image digest.
curl -I https://docs.clickclack.chat

Guardrails

Do not print OAuth secrets or magic tokens.
The deploy token has no DNS scope; DNS record changes need the dashboard or a Zone.DNS token.
Keep deploys from clean git checkouts, not dirty working trees.

steipete/clickclack

skills/clickclack/SKILL.md

ClickClack ops: chat app, Cloudflare Workers deploy, DNS/docs/app, container rollout.

5,248 stars

tools

Updated Jul 6, 2026

$ install --global

skillsauth

npx skillsauth add steipete/agent-scripts clickclack

Install this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.

Security Scan Results

3 of 9 scanners reported clean

Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.

Scanners Passed

Scanners in report

Clean

TrivyContainer and dependency vulnerability scanner

95%

Clean

SemgrepStatic code analysis for vulnerabilities

95%

Clean

mcp-scan (Snyk)Model Context Protocol security validation

95%

Skipped

Snyk (dep)Open source security scanning

50%

Skipped

Socket.devSupply chain security analysis

50%

Skipped

VirusTotalMulti-engine malware detection

50%

Skipped

CrowdStrikeAdvanced threat intelligence

50%

Skipped

OSV-ScannerOpen Source Vulnerability database check

50%

Skipped

OWASP Dep-Check

50%

Last scanned: Jul 6, 2026, 4:30 AM159.5s2 files scanned

SKILL.md

name:: clickclack
description:: ClickClack ops: chat app, Cloudflare Workers deploy, DNS/docs/app, container rollout.

ClickClack

Use this for ClickClack product/runtime ops, deploys, hosted app checks, and domain questions.

What

Repo: ~/Projects/clickclack / https://github.com/openclaw/clickclack
Product: self-hostable Slack-style chat for OpenClaw/community/agent workflows.
Surfaces:
- https://clickclack.chat product site (Cloudflare Worker custom domain)
- https://www.clickclack.chat (Worker custom domain, same worker)
- https://app.clickclack.chat hosted app (Worker custom domain)
- https://docs.clickclack.chat GitHub Pages docs from docs/

Prod (Cloudflare, since 2026-07-05)

Everything is one Cloudflare Worker clickclack in the OpenClaw account (91b59577e757131d68d55a471fe32aca) fronting a Cloudflare Container.
Worker + container config: wrangler.jsonc (routes are declarative custom_domain entries).
Container: Go binary + embedded SPA from Dockerfile.cloudflare; data in Supabase Postgres (CLICKCLACK_DB secret) and R2 uploads (clickclack-uploads).
Zone clickclack.chat id e7f93ba1ec24d75ce60c468bbaba5cb5 (OpenClaw account). docs CNAME → openclaw.github.io stays DNS-only.
1Password (OpenClaw vault): "Cloudflare ClickClack deploy token" (api_token field, workers-scoped; no DNS edit), "Cloudflare ClickClack R2 uploads".
Legacy Hetzner box clickclack-prod-01 (157.90.237.80) no longer serves any DNS; decommission when confident. Old runbook in git history of this file.

Deploy

cd ~/Projects/clickclack && git pull --ff-only
Docker must run (OrbStack: open -a OrbStack).
pnpm deploy:cloudflare (auth: wrangler login OAuth or the 1Password deploy token as CLOUDFLARE_API_TOKEN).
Rollout gotcha: the running container instance is NOT replaced while it has traffic; sleepAfter=10m never fires on a public site. Bump CLICKCLACK_CONTAINER_NAME in wrangler.jsonc (dated, e.g. prod-YYYYMMDD-open-org) and redeploy to force a fresh instance on the new image. Container is stateless (Postgres/R2), so the swap is safe.
Commit the wrangler.jsonc bump.

Verify

curl -s https://clickclack.chat/ | grep -oE 'entry/app\.[A-Za-z0-9_-]+\.js' — hash must match the freshly deployed build (compare against https://clickclack.services-91b.workers.dev).
Same check for https://app.clickclack.chat and https://www.clickclack.chat.
pnpm exec wrangler containers info a03b3158-bcfd-4962-9a86-e75489f4e803 — health + image digest.
curl -I https://docs.clickclack.chat

Guardrails

Do not print OAuth secrets or magic tokens.
The deploy token has no DNS scope; DNS record changes need the dashboard or a Zone.DNS token.
Keep deploys from clean git checkouts, not dirty working trees.

Related Skills

steipete/npm

tools

VerifiedTrustedCommunity

npm registry ops: login, whoami, names, publish; 1Password tmux.

6,597SKILL.mdUpdated May 9, 2026

steipete/fleet-maintenance

development

VerifiedTrustedCommunity

Mac fleet inventory and upkeep with full/worker profiles: collect installed apps and packages, compare desired versus observed state, audit local-account escrow references, update Homebrew/global packages, safely sync repos and Xcode, and report disk, service, backup, update, and security health.

6,582SKILL.mdUpdated Jul 11, 2026

steipete/fleet-maintenance

steipete/codex-first

tools

VerifiedTrustedCommunity

Claude Code work routing: delegate implementation, fixing, exploratory subagents, rebasing, and PR merging/landing to Codex CLI while the parent specifies, decides, reviews, and verifies. Load a private codex-next policy first when available; otherwise use the native-Claude model gate. Codex-backed autoreview is always allowed and preferred.

6,582SKILL.mdUpdated Jul 7, 2026

steipete/peekaboo

tools

VerifiedTrustedCommunity

macOS screen capture, accessibility inspection, and background-first app/window/UI automation with Peekaboo v4.

6,582SKILL.mdUpdated May 14, 2026

Download

For Claude Desktop. Download once, then upload the file in the app — no terminal needed.

Need help? View full Cowork setup guide →

Install manually

Choose your platform

# Clone the repo
git clone https://github.com/steipete/agent-scripts.git

# Copy into Claude Code skills folder (global)
cp -r agent-scripts/skills/clickclack ~/.claude/skills/

Claude Code Skills — official skills path docs.

Repository

steipete/agent-scripts

5,248 stars

Compatible with

Claude Code

OpenAI Codex CLI

ChatGPT